Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File: HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier: gPeFgr0ORg74UXgY9m8y8X9TEXJ2XIqVv0qoQHNmv6s=
Subject key identifier: F2:47:D0:89:B7:94:0F:95:50:32:F6:1F:E7:4E:7A:9B:7C:BE:D5:9F
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer: /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial: 0194BC72F4D1581090105BEE7B6911CEB1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: ESdFHrMTT9CdnTueAws85KzTpOo.roa (hash: EFe4+WtiIfRKsYq3EhY1PIgLIFzMrHc8WS2QY4wWHBs=)
2: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: VhfDTZRkxrGy6ALMMW43emsKl8/V1ufSd1L/7xrp9KU=)
3: S7dw96BjJHjSAZkMcxGi_FB5doA.roa (hash: KE2tpzq8RhZkUzoGjIN+rbgmJi4KOhIPNewQQ1O2Z3o=)
4: lHt_Mh1w-7vs8I-ZaeWKv1xW2Ps.roa (hash: /8Glm1hc9AeZKEAxOBVRVagGt2gyvK5usk/gBvfbgls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f4:d1:58:10:90:10:5b:ee:7b:69:11:ce:b1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=f247d089b7940f955032f61fe74e7a9b7cbed59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:33:7e:a7:00:00:b9:8f:be:1c:f5:b3:bc:
8a:16:30:22:d9:d4:1f:db:4b:bd:d1:1b:1d:ec:ba:
c9:9a:b4:91:27:4f:06:3d:e2:e9:5e:8a:f2:14:6e:
59:4c:38:36:2f:10:9a:e1:d5:19:93:be:75:20:cc:
0f:f7:39:38:6c:73:07:80:a2:30:b1:16:42:71:fb:
25:3e:22:54:a4:43:a0:62:df:f1:a0:55:7b:df:52:
63:33:8a:b9:3e:fc:4b:77:dc:de:fb:1a:f8:59:e7:
1b:1b:4e:2f:78:13:01:9c:6d:cc:71:36:d9:29:7d:
b5:16:6d:6d:21:08:8d:ae:ec:80:fb:95:ba:41:9b:
89:21:c4:89:28:0c:a3:41:13:90:b2:39:a5:0b:7b:
d2:08:de:94:17:ec:44:fd:61:17:82:a0:f6:e8:59:
6f:b8:c9:b5:c8:40:26:3c:73:32:cd:7a:94:be:d7:
fc:b3:96:bd:7a:de:82:8a:46:6e:a9:76:c6:7a:5e:
97:79:bf:9f:61:d4:65:f3:ee:13:8d:e7:e9:48:d2:
b0:01:98:24:ae:6f:68:f0:88:29:7e:c9:d7:2a:52:
6b:65:29:c4:b0:38:72:d4:2c:9d:f4:05:a5:12:cb:
b6:bc:9e:8e:ad:fc:f1:ef:06:08:97:cf:95:67:50:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:47:D0:89:B7:94:0F:95:50:32:F6:1F:E7:4E:7A:9B:7C:BE:D5:9F
X509v3 Authority Key Identifier:
keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5a:76:cd:65:76:a0:b1:aa:0b:4a:58:93:aa:17:1a:b0:b9:
77:05:59:25:f3:5c:db:2e:ef:f4:b4:2a:11:6f:45:93:36:14:
72:21:1c:dc:07:81:7c:a7:15:be:e7:31:a5:16:41:9e:1c:a4:
46:ee:2f:d1:36:50:79:13:d8:b5:d6:11:22:36:76:1b:cf:dc:
7a:f5:f8:40:0f:71:f4:a1:6b:c7:45:74:18:f1:2e:28:5e:3e:
ce:7f:8a:74:8a:db:c4:9a:b1:55:2b:f6:c0:b2:a0:8b:c0:2a:
41:5f:cb:ce:c6:6b:ee:1b:24:0b:eb:25:35:f7:63:f0:6b:c4:
62:85:68:73:ec:99:e7:e7:3d:ce:65:de:64:ef:c1:cb:f9:f6:
52:c9:e2:59:36:28:00:2c:7a:e4:48:f3:f1:e9:c5:fc:ca:af:
d3:28:88:6b:9c:dd:68:64:8f:9b:b5:eb:28:7f:12:60:dc:c2:
a3:3f:6c:5b:eb:66:ee:54:ba:13:4b:be:6e:38:35:ee:9a:86:
87:72:e8:99:99:5f:85:d2:3f:d9:50:b6:a1:80:46:bc:ae:ff:
6a:24:0f:f4:15:a9:6b:6d:1b:7c:c0:06:40:78:a4:a4:d1:5f:
12:15:45:e6:02:17:e6:63:ca:be:c8:45:63:b7:b4:16:66:cf:
d8:9c:36:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvTRWBCQEFvue2kRzrHoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjViN2I3Yjg5OGZhYWVlNzA3NjdkMDk3MTVjNDM2YTgz
ZmNkYzIwHhcNMjUwMTMxMTMwMDM3WhcNMjUwMjAxMTMwMDM3WjAzMTEwLwYDVQQD
EyhmMjQ3ZDA4OWI3OTQwZjk1NTAzMmY2MWZlNzRlN2E5YjdjYmVkNTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV4zfqcAALmPvhz1s7yKFjAi2dQf
20u90Rsd7LrJmrSRJ08GPeLpXoryFG5ZTDg2LxCa4dUZk751IMwP9zk4bHMHgKIw
sRZCcfslPiJUpEOgYt/xoFV731JjM4q5PvxLd9ze+xr4WecbG04veBMBnG3McTbZ
KX21Fm1tIQiNruyA+5W6QZuJIcSJKAyjQROQsjmlC3vSCN6UF+xE/WEXgqD26Flv
uMm1yEAmPHMyzXqUvtf8s5a9et6CikZuqXbGel6Xeb+fYdRl8+4TjefpSNKwAZgk
rm9o8IgpfsnXKlJrZSnEsDhy1Cyd9AWlEsu2vJ6Orfzx7wYIl8+VZ1CoKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJH0Im3lA+VUDL2H+dOept8vtWfMB8GA1UdIwQY
MBaAFB1lt7e4mPqu5wdn0JcVxDaoP83CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUt
OGZjMzczNzU3Njg0LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUtOGZjMzczNzU3Njg0
LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlp2zWV2
oLGqC0pYk6oXGrC5dwVZJfNc2y7v9LQqEW9FkzYUciEc3AeBfKcVvucxpRZBnhyk
Ru4v0TZQeRPYtdYRIjZ2G8/cevX4QA9x9KFrx0V0GPEuKF4+zn+KdIrbxJqxVSv2
wLKgi8AqQV/LzsZr7hskC+slNfdj8GvEYoVoc+yZ5+c9zmXeZO/By/n2UsniWTYo
ACx65Ejz8enF/Mqv0yiIa5zdaGSPm7XrKH8SYNzCoz9sW+tm7lS6E0u+bjg17pqG
h3LomZlfhdI/2VC2oYBGvK7/aiQP9BWpa20bfMAGQHikpNFfEhVF5gIX5mPKvshF
Y7e0FmbP2Jw2cw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:57 2025 by rpki-client